Solaris Engineer at Sun^H^H^HOracle (Release management, Security, X11, GNOME); former board member of @XorgFoundation & @OpenSolaris. pronoun.is/he

Joined May 2007
278 Photos and videos
I'm not ready to give up on twitter, but enough of the people I care about following here have joined Mastodon to make it interesting to me to do so as well, so I'm now in the fediverse at fosstodon.org/web/@alanc.
2
1
11
Alan Coopersmith @alanc@hachyderm.io retweeted
OooOOooOooo, happpy halloooweeeeeen!!
C23 appears to have been published: iso.org/standard/82075.html I sort of expected to get a formal notification of some kind, but ¯\_(ツ)_/ Thanks to everyone who contributed to this effort over the past decade or so, particularly our editors @__phantomderp and Freek Wiedijk.
2
9
104
4,454
Alan Coopersmith @alanc@hachyderm.io retweeted
C23 appears to have been published: iso.org/standard/82075.html I sort of expected to get a formal notification of some kind, but ¯\_(ツ)_/ Thanks to everyone who contributed to this effort over the past decade or so, particularly our editors @__phantomderp and Freek Wiedijk.
4
35
175
12,524
Alan Coopersmith @alanc@hachyderm.io retweeted
30 Oct 2024
A commenter at Citation Needed suggested I have not adequately explained why I support Kamala Harris, and why I believe it is absolutely critical that everyone who can vote comes out to vote for her. In case I have indeed not been clear, here is my response. PLEASE vote.
36
65
544
27,829
Alan Coopersmith @alanc@hachyderm.io retweeted
CVE-2024-9632: X.Org X server and Xwayland: Heap-based buffer overflow privilege escalation in _XkbSetCompatMap openwall.com/lists/oss-secur…

2
3
572
Alan Coopersmith @alanc@hachyderm.io retweeted
24 Oct 2024
4
47
173
3,660
Alan Coopersmith @alanc@hachyderm.io retweeted
H. Ye and H. Hu, "Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems" ("BADASS") huhong789.github.io/papers/y… [OpenBSD's been calling out the Linux antipattern that is PT_GNU_STACK for years..] x.com/canadianbryan/status/1…

Linux has a tendency toward introducing dangerous antipatterns to the ecosystem, the comparison Theo makes to executable-stacks is a real one, and keeps being repeated. news.ycombinator.com/item?id…
6
17
1,503
Alan Coopersmith @alanc@hachyderm.io retweeted
25 years ago on Sep 29, 1999, MITRE announced the CVE Initiative. There's too much to say, so I'll be brief. CVE was not possible without a concerted, mostly-voluntary, community-wide effort. It's accomplished a lot, but it's daunting to see how much still needs to be done...
3
16
43
7,470
Alan Coopersmith @alanc@hachyderm.io retweeted
26 Sep 2024
Google post on "Eliminating Memory Safety Vulnerabilities at the Source" shows how transitioning to memory safe code dropped memory vulnerabilities from 76% to 24% on Android over 6 years: security.googleblog.com/2024…
1
13
20
3,336
Alan Coopersmith @alanc@hachyderm.io retweeted
Think that running Solaris means you're stuck with an ancient version of Java? Think again: 
pkgs.tribblix.org/openjdk/#illumos #solaris #openjdk

7
20
627
For info on the security fixes in those releases, see the Oracle Systems Risk Matrix in the July 2024 CPU Bulletin at oracle.com/security-alerts/c… and the Oracle Solaris Third Party Bulletin for July 2024 at oracle.com/security-alerts/b… .

1
5
236
Alan Coopersmith @alanc@hachyderm.io retweeted
#Oracle #Solaris 11.4.71.170.2) (@OracleSolaris SRU 71.170.2) New: old libffi 3.2.1 (back temporarily) Updates: Unbound, httpd, Jinja2, git, libarchive, PHP, FF, TB Security: python, gnu-indent Bugs fixes:31 EOF: n/a CVEs: 52
1
5
9
453
Alan Coopersmith @alanc@hachyderm.io retweeted
And to prove their commitment to realism, Marvel hired the oldest actor they could find to play the President of the United States.
159
3,320
91,575
1,334,479
Alan Coopersmith @alanc@hachyderm.io retweeted
Yep 😂😬
9
30
295
36,979
Alan Coopersmith @alanc@hachyderm.io retweeted
"I decided to write my own version of Unix V7 so students could learn all about it and study the operating system code." Watch Andrew S. Tanenbaum, recipient of the 2023 ACM Software System Award, talk abt the origin of MINIX and its long-lasting impact: youtu.be/mHqX6aXh5Fc
1
55
143
7,371
Alan Coopersmith @alanc@hachyderm.io retweeted
9 Jul 2024
The RADIUS protocol is commonly used to control admin access to networking gear. Today, Cloudflare and a team of researchers are disclosing a vulnerability in RADIUS based on its outdated use of MD5. Learn more: cfl.re/3xNIoBw
1
25
51
10,164
Alan Coopersmith @alanc@hachyderm.io retweeted
🧮 Clang and GCC are introducing the "counted_by" attribute for flexible array members! The new attribute helps compilers know the bounds of a flexible array member, making hardened apps less exploitable. 👀 Learn more ⬇️ goo.gle/3LiaQP1
2
12
1,934